Splunk Search

How do I add dot or square markers on my line chart (timeline)?

melonman
Motivator

Hi

I have a simple XML dashboard with 1 panel as line chart showing the following search result:

 * | timechart span=1h count

and XML is:


* | timechart span=1h count
index=me | timechart count
log
line

What I want to do is
1) add markers where data is plotted on Y (count)
2) delete the line so only plotted marker is shown without line

I am looking for this in the Visualization document for 5.0.1, but still can't figure out how to do this.
Also tried to use scatter chart with _time in X axis, but no luck.

Any comment would be appreciated,
Thanks!

Tags (1)
1 Solution

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

View solution in original post

lguinn2
Legend

Try adding this:

<option name="charting.chart.showMarkers">true</option>
<option name="charting.chart.markerSize">3</option>           
<option name="charting.chart.lineStyle.alpha">0</option>

I am not sure that it will work in 5.0.1, but it is worth a try. I got this info from this answer

melonman
Motivator

alpha is not working for JSchart now, but this is enough for me now. Thanks a lot!

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...